GET /v3/user/profile

GET

/v3/user/profile

const url = 'https://api-ha-prod-p8.handbid.dev/v3/user/profile';
const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url https://api-ha-prod-p8.handbid.dev/v3/user/profile \
  --header 'Authorization: Bearer <token>'

NEW (HAN-2040, 2026-06-05). The authenticated user’s own account profile — intrinsic user-account scalars only. Auth required (bearer); always scoped to the token’s user, never a client-supplied id. Structured addresses live at /v3/user/addresses; this is distinct from /v3/user/my-auctions (auction memberships).

Response (200): a single profile object.

Field	Type	Notes
`identity`	int	The user id.
`usersGuid`	string	Keys the Socket.io user room (`room:{usersGuid}`).
`firstName`	string
`lastName`	string
`displayName`	string	Alias / preferred display name (`users.alias`).
`email`	string	Read-only here — not editable via PUT.
`userCellPhone`	string
`profilePhotoUrl`	string \| null	Read-only. Most-recent non-deleted `user_image` CDN URL, or null.
`countryCode`	string \| null	Virtual — ISO 3166-1 alpha-2 resolved from `users.userAddressCountryId`.
`shippingAddress`	string \| null	Read-only, flattened. The structured primary address (`/v3/user/addresses`, `isPrimary=true`) is the source of truth; a write-bridge keeps this legacy scalar equal to the formatted primary. Edit via the addresses resource, never here.
`company`	string \| null

Errors: 401 anonymous.

Rate limit: userProfile.

Authorizations

bearer

Responses

200

Successful response

application/json